This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa File: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (raw, json) Hash identifier: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8= Subject key identifier: 04:54:9D:B1:B1:24:3E:E0:3E:61:95:CC:C1:19:23:6C:54:81:2F:FE Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Certificate serial: 019B7F8339942921EF409376F4C0A77524BC Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49796 IP address blocks: 185.167.72.0/22 maxlen: 22 185.167.72.0/23 maxlen: 23 185.167.72.0/24 maxlen: 24 185.167.72.3/32 maxlen: 32 185.167.72.13/32 maxlen: 32 185.167.72.253/32 maxlen: 32 185.167.72.254/32 maxlen: 32 185.167.73.0/24 maxlen: 24 185.167.74.0/23 maxlen: 23 185.167.74.0/24 maxlen: 24 185.167.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:39:94:29:21:ef:40:93:76:f4:c0:a7:75:24:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04549db1b1243ee03e6195ccc119236c54812ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:04:8f:11:fd:9e:4a:3c:c8:ed:23:5f:2b: 6c:06:b0:b2:ce:62:92:f1:5d:95:25:fd:8c:c8:fe: 53:8d:3a:8f:c4:e9:57:3a:9c:da:91:66:ab:a9:46: 83:c6:14:d6:24:42:c3:56:39:c6:da:92:f9:3b:f6: b0:86:12:6f:4a:25:92:df:8e:ac:08:e2:d2:05:ff: 96:b1:13:b0:6f:e7:fb:1b:be:22:20:93:94:7b:a2: cb:0b:06:b7:95:1a:97:6e:6d:e7:24:2d:88:87:cf: df:cf:17:c5:1e:0e:47:e1:cb:e7:e0:91:20:50:2f: 47:9c:a9:04:67:3a:c2:1a:c7:63:ac:2b:1d:ca:78: 40:de:30:1b:19:1d:38:c4:3b:60:f4:9b:d6:8d:e9: 08:e5:41:be:09:ae:c6:c6:93:10:16:dc:39:74:47: d1:b6:29:a3:d7:b2:d6:81:52:a3:c7:84:23:17:21: 90:7c:b2:aa:94:df:9b:7a:8f:79:0a:3c:4d:e3:2d: fc:cd:64:b2:46:7a:2a:10:42:41:6c:a4:a0:45:95: 7d:4c:82:9d:00:97:ae:ee:5f:26:9e:31:78:43:63: f5:81:2a:7a:9f:4a:c7:9f:37:b0:c2:68:db:d3:f6: 33:be:fe:69:2c:1e:94:a9:cb:e8:b1:6e:2a:0a:8a: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:54:9D:B1:B1:24:3E:E0:3E:61:95:CC:C1:19:23:6C:54:81:2F:FE X509v3 Authority Key Identifier: keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.72.0/22 Signature Algorithm: sha256WithRSAEncryption 48:db:38:bc:8d:41:54:26:1c:e5:73:14:cd:82:1d:31:a0:3e: 46:4d:b2:6a:79:3e:05:b5:27:e5:0f:ff:b8:78:40:f1:45:97: e7:f3:78:ff:87:6f:f5:f5:dd:9a:bf:4e:e3:28:0b:fb:19:c2: 68:80:98:3b:c9:7c:57:34:68:72:e5:af:87:ef:2c:72:32:26: 1f:c1:3d:1b:53:e7:8b:5c:8b:c1:83:9d:40:41:22:63:97:81: 55:92:8f:b4:1a:54:f7:cb:d9:39:0a:ee:d0:0f:8e:59:02:3f: bf:83:dc:2d:89:b1:1f:a5:e4:6e:fb:86:9d:c9:a3:fd:40:f0: 53:9a:6b:48:97:d6:4f:fe:d4:c1:1e:2e:e7:a6:e1:9e:bf:a6: be:18:0b:75:f4:fc:6e:6f:c0:09:31:f1:6e:57:1b:84:e6:0d: b9:96:d1:38:46:2a:db:fc:ea:34:82:f3:07:4f:70:3d:c8:c1: 77:2c:e9:ce:2e:fa:cf:63:f6:c5:dc:5f:b1:06:0d:7a:38:b8: ed:b5:6a:10:c1:1a:68:51:5d:69:86:51:46:38:6e:dc:ac:08: a3:c8:3c:36:ea:7b:56:54:08:73:0a:eb:01:70:65:39:e5:72: da:cf:27:06:98:04:6a:a0:2d:a1:c2:97:5c:2c:4a:55:0d:3b: 4e:cb:7b:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gzmUKSHvQJN29MCndSS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx YTQwZjEwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDU0OWRiMWIxMjQzZWUwM2U2MTk1Y2NjMTE5MjM2YzU0ODEyZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitQEjxH9nko8yO0jXytsBrCyzmKS 8V2VJf2MyP5TjTqPxOlXOpzakWarqUaDxhTWJELDVjnG2pL5O/awhhJvSiWS346s COLSBf+WsROwb+f7G74iIJOUe6LLCwa3lRqXbm3nJC2Ih8/fzxfFHg5H4cvn4JEg UC9HnKkEZzrCGsdjrCsdynhA3jAbGR04xDtg9JvWjekI5UG+Ca7GxpMQFtw5dEfR timj17LWgVKjx4QjFyGQfLKqlN+beo95CjxN4y38zWSyRnoqEEJBbKSgRZV9TIKd AJeu7l8mnjF4Q2P1gSp6n0rHnzewwmjb0/Yzvv5pLB6UqcvosW4qCorSBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARUnbGxJD7gPmGVzMEZI2xUgS/+MB8GA1UdIwQY MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt MGU0MzgyMzEwY2E1LzEvQkZTZHNiRWtQdUEtWVpYTXdSa2piRlNCTF80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1 LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuadIMA0G CSqGSIb3DQEBCwUAA4IBAQBI2zi8jUFUJhzlcxTNgh0xoD5GTbJqeT4FtSflD/+4 eEDxRZfn83j/h2/19d2av07jKAv7GcJogJg7yXxXNGhy5a+H7yxyMiYfwT0bU+eL XIvBg51AQSJjl4FVko+0GlT3y9k5Cu7QD45ZAj+/g9wtibEfpeRu+4adyaP9QPBT mmtIl9ZP/tTBHi7npuGev6a+GAt19Pxub8AJMfFuVxuE5g25ltE4Rirb/Oo0gvMH T3A9yMF3LOnOLvrPY/bF3F+xBg16OLjttWoQwRpoUV1phlFGOG7crAijyDw26ntW VAhzCusBcGU55XLazycGmARqoC2hwpdcLEpVDTtOy3up -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:05 2026 by rpki-client